DarkVNC

DarkVNC is a backdoor/remote access malware used to control an infected machine via the VNC protocol. The provided reporting describes it as a hidden virtual network computing (hVNC)-style capability that enables attackers to gain remote access to compromised computers. It is referenced as a BackConnect used alongside IcedID, and separate reporting notes packed specimens of DarkVNC observed together with Sodin/REvil/Sodinokibi. The content does not provide a specific infection vector, platform list, threat actor attribution, or concrete indicators of compromise for DarkVNC itself.